Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/252B74B271E711EC93623E71C4F9AE02.roa
File:                     252B74B271E711EC93623E71C4F9AE02.roa (raw, json)
Hash identifier:          zrEbwv5THOfQ4SBU5NK3kv8wRhx57kuE2yvHNXtrzIA=
Subject key identifier:   65:0D:53:21:5D:3B:F9:B5:DF:92:F4:08:0F:A8:12:F4:CB:11:BB:F0
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36A9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/252B74B271E711EC93623E71C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:54 +0000
ROA not before:           Sat 08 Jul 2023 14:30:54 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     24067
IP address blocks:        61.91.196.0/24 maxlen: 24
                          61.91.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13993 (0x36a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:54 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a9731e-594a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:ac:67:cd:eb:d8:76:45:03:3c:43:fc:e7:
                    4d:16:a0:d0:44:38:e6:ce:1d:5c:0a:d0:c9:d1:37:
                    13:38:2f:ec:b5:83:a4:06:c2:e7:ed:85:f0:8f:7b:
                    84:0d:a6:ee:d3:92:c5:9b:71:35:9a:04:4b:db:08:
                    ea:51:6b:18:c0:c0:34:d6:27:10:d6:e4:2f:0b:43:
                    1a:e0:a4:4e:fd:e0:83:2f:b3:c4:ee:8e:c0:3b:ce:
                    27:1f:17:f6:06:97:0d:1b:fb:89:9c:a6:8c:96:48:
                    06:da:89:05:d7:42:a2:cb:f9:0e:e4:9c:97:69:87:
                    5f:8b:45:fb:06:43:95:e6:e5:d9:ac:1b:aa:de:5a:
                    8f:9e:37:df:d1:e5:01:d0:84:69:10:3c:fd:2a:ea:
                    90:29:88:95:bc:83:67:83:54:71:a7:7a:99:5b:d7:
                    21:2c:9f:b2:5e:e7:70:dd:c8:89:7a:7f:8f:57:5a:
                    1e:16:72:c8:c0:03:b4:1d:6a:39:82:03:5e:ea:3c:
                    8f:d2:0e:7d:e3:0c:7a:56:c2:b1:76:0f:2f:06:ea:
                    d6:69:66:12:28:7f:3a:dc:52:00:d0:2a:cf:0b:b2:
                    42:e9:0e:e4:b2:60:c4:98:9a:f5:9c:58:ec:97:a3:
                    9d:9e:96:9b:fe:52:82:ac:4c:09:73:70:59:0b:2f:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:53:21:5D:3B:F9:B5:DF:92:F4:08:0F:A8:12:F4:CB:11:BB:F0
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/252B74B271E711EC93623E71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:e1:48:fc:42:1d:62:bc:70:02:fd:7f:ac:7a:d7:79:f4:
         23:ea:26:0d:ab:c7:af:13:4a:4e:83:25:d7:da:e6:aa:1d:59:
         de:3b:26:f4:92:be:6f:05:52:65:e8:63:9a:82:04:0a:f1:52:
         93:c7:1c:28:25:89:c2:92:0c:68:2b:0f:1a:f2:8c:49:a2:b5:
         19:0d:2b:73:86:49:e1:7a:58:c4:6f:00:cd:82:78:12:1e:c5:
         3d:30:d9:d0:44:a9:79:e6:2d:5e:34:6f:39:0b:3b:65:8c:89:
         aa:fa:fd:fa:f1:60:52:0f:b4:66:66:d2:1e:d6:06:25:dd:d2:
         18:03:88:c2:39:7d:df:0c:2d:13:6c:15:1b:40:87:3e:de:31:
         2f:6f:24:8b:69:ad:fc:cc:9f:41:33:66:93:31:85:76:83:33:
         14:15:f4:de:d5:88:5b:31:35:3c:a7:dd:4b:73:ad:fc:b7:96:
         1a:3a:04:bc:58:f4:ca:9a:17:6b:94:d1:e4:7a:a9:40:64:84:
         04:d0:5a:de:b8:77:a1:13:c0:ec:e7:fb:fe:65:83:4d:e8:a2:
         55:36:1e:b5:ee:1e:f6:16:55:a4:e9:a7:8f:53:a8:4f:64:50:
         44:6c:65:7e:dc:e6:98:37:9a:a9:c3:0d:20:b8:8f:bf:c9:1c:
         9e:11:32:ce
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzA4MTQzMDU0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzMxZS01OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3D+sZ83r2HZFAzxD/OdNFqDQRDjmzh1cCtDJ0TcTOC/stYOkBsLn7YXwj3uE
Dabu05LFm3E1mgRL2wjqUWsYwMA01icQ1uQvC0Ma4KRO/eCDL7PE7o7AO84nHxf2
BpcNG/uJnKaMlkgG2okF10Kiy/kO5JyXaYdfi0X7BkOV5uXZrBuq3lqPnjff0eUB
0IRpEDz9KuqQKYiVvINng1Rxp3qZW9chLJ+yXudw3ciJen+PV1oeFnLIwAO0HWo5
ggNe6jyP0g594wx6VsKxdg8vBurWaWYSKH863FIA0CrPC7JC6Q7ksmDEmJr1nFjs
l6Odnpab/lKCrEwJc3BZCy88CwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGUNUyFd
O/m135L0CA+oEvTLEbvwMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMjUyQjc0QjI3
MUU3MTFFQzkzNjIzRTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAE9W8QwDQYJKoZIhvcNAQELBQADggEBACrq4Uj8Qh1ivHAC
/X+setd59CPqJg2rx68TSk6DJdfa5qodWd47JvSSvm8FUmXoY5qCBArxUpPHHCgl
icKSDGgrDxryjEmitRkNK3OGSeF6WMRvAM2CeBIexT0w2dBEqXnmLV40bzkLO2WM
iar6/frxYFIPtGZm0h7WBiXd0hgDiMI5fd8MLRNsFRtAhz7eMS9vJItprfzMn0Ez
ZpMxhXaDMxQV9N7ViFsxNTyn3Utzrfy3lho6BLxY9MqaF2uU0eR6qUBkhATQWt64
d6ETwOzn+/5lg03oolU2HrXuHvYWVaTpp49TqE9kUERsZX7c5pg3mqnDDSC4j7/J
HJ4RMs4=
-----END CERTIFICATE-----
Generated at Fri May 31 15:08:08 2024 by rpki-client on console-fra.rpki-client.org